METHOD FOR CONTROLLING UPGRADE OF FIRMWARE 
BACKGROUND OF THE INVENTION 

Field of the Invention 

The invention generally relates to a method for controlling upgrade of software in an 
electronic device, and particularly relates to a method for controlling upgrade of firmware 
of an electronic device, such as a computer, in an intelligent, self-protective manner. 

Related Art 

Firmware is a key component in an electronic device, such as a computer, that stores 
program and data in a read only memory of the device, which is unchangeable under user 
operations. 

An electronic device, especially an information processing device, is usually found of 
insufficient functions or "bugs" that require to be upgraded or corrected after being made 
and sold. The firmware that stores the operational software and data then has to be 
upgraded. It has been a trend that manufacturers provide firmware upgrade means for 
improving the functions of a device, lengthening its usage lifetime and saving user's 
investment. However, the firmware upgrade encounters two conflicted demands. First, the 
firmware should be well protected that cannot be easily modified and caused of system 
failure. Second, the firmware has to be easily upgraded so as to improve or remedy the 
performance or function of the device. 

Therefore, when upgrading a firmware, the operator has to be very carefiil. Otherwise, 
a wrong operation or wrong version of firmware may cause a serious result to the device 
such as total malfunction of the system. However, conventional process of firmware 
upgrade does not provide any controlling or preventive mechanism to avoid the danger so 
that the device is easily damaged by a false upgrade of firmware. 
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SUMMARY OF THE INVENTION 



The object of the invention is to provide a method for controlHng upgrade of 
firmware of an electronic device. A coding method is applied for management of software 
and hardware versions of the device. According to the codes, the entireness and correctness 
of a firmware is checked before recording the firmware, so that any unintentional mistake 
or intentional change to the firmware file can be prevented. The compatibility of the 
firmware file to the hardware and the system resource capacity of the hardware are 
confirmed in order to prevent fi*om failure during updating. 

A method for controlling upgrade of firmware of an electronic device according to 
the invention includes steps of forming a hardware ID code, forming a firmware ID code, 
checking the firmware ID and hardware ID codes and upgrading the firmware. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The invention will become more fully understood from the detailed description given 
hereinbelow. However, this description is for purposes of illustration only, and thus is not 
limitative of the invention, wherein: 

FIG. 1 is a flowchart of a method for controlling upgrade of firmware of an 
electronic device according to the invention; 

FIG. 2 is a flowchart of process of forming a hardware ID code in a method of the 
invention; 

FIG. 3 is a flowchart of process of forming a firmware ID code in a method of the 
invention; and 

FIG. 4 a flowchart of process of checking firmware ID code and hardware ID code 
and upgrading the firmware in a method of the invention. 



DETAILED DESCRIPTION OF THE INVENTION 

The invention applies a coding method for managing software and hardware versions 
of the device. The hardware version relates to the construction of the device. The software 
version relates to the operational software of the device. Preferred embodiments of the 
5 hardware and software version are described below. 

Hardware version 

A hardware version' is used to identify the compatibility of the firmware to the 
hardware. The data of hardware version includes the following portions: 
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In which, Vender/Product ID relates to the vender name and the product name; V is a 
10 byte of vender code; C is a byte of CPU code because CPU is an important component 
correlative to the firmware version; P is a byte of product code; H is a hyte of hardware 
(circuit board) code and R is a reserved byte for extension. For example, a hardware 
version is like this: 
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In application, when a serial of products are developed with different hardware 
15 components (such as CPUs or circuit boards), the identification can be made through the C 
(CPU) or H (circuit board) code. Also, when the devices are supplied by different venders, 
the V code registers the difference so that a firmware made by a vendor A can be controlled 
to avoid from being used to a hardware of vendor B, and the relative rights are protected. 

Software version 

20 A software version is used to identify different versions of software (firmware files) 

that are applicable to a same hardware. A software version may include the following 
portions: 
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In which, A is a hyto of main version (major function improvement) code; the first B 
byte is a code for major bug correction; the second and third B bytes are codes for 
secondary bug corrections; the CC bytes are codes of specified version, such as for 
different OEM customers or for special objects. An example of a software version is like 
5 this: 
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As shown in FIG. l\ a method for controlling upgrade of firmware of an electronic 
device according to the invention includes process of forming a hardware ID code (step 
101), forming a firmware ID code (step 102), checking the firmware ID code and hardware 
10 ID code and upgrading the firmware (step 103). 

FIG. 2 illustrates the detailed process of forming the hardware ID code. The steps 
are: confirming hardware version (step 201); confirming password (step 202); confirming 
the salt (step 203); confirming the algorithm (step 204); operating the algorithm with the 
codes and getting the hardware ID code (step 205) and finally, writing the salt and the 
15 hardware ID code into the hardware (step 206). The password is secretively reserved by 
the developer and is not published. The salt is a code randomly generated with each 
computation so as to be recorded along with the hardware ID code into the hardware of the 
device for checking the compatibility of firmware when updating in the other days. 

The algorithm is to compute XOR (logical exclusive OR) of the bytes of hardware 
20 version, password and salt, and get a hardware ID code. The operation is simple, fast and 
safe. An example of the algorithm and computation is listed below. 
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The salt and the hardware ID code are both written into a non-evaporative memory 
unit of the device, such as a CPLD (complex programmable logic device) or an EEPROM 
(electrically erasable programmable read only memory). 



FIG. 3 illustrates the detailed process of forming the firmware ID code. The steps are: 
5 taking software version and hardware version (step 301); computing and getting hardware 
ID code and the salt (step 302); computing and getting the checksum of firmware file (step 
303); and filling in empty spaces with randomized numbers (step 304). 

Since the hardware ID code is computed firom the hardware version, password and 
randomized salt, the randomized salts generate different hardware ID codes. The salt and 
10 the hardware ED code are also included in the firmware ID so as to increase the difficulty of 
cracking the hardware ID code. 

For computing the checksum, different operations can be used. The embodiment uses 
XOR computation for the whole firmware content and the hardware ID code, and generates 
a one-byte checksum. 

15 Filling randomized numbers in the empty spaces is to increase the difficulty of 

cracking the hardware ID code. Because each salt is randomly generated, the hardware ID 
code and the randomized numbers are hard to be identified. Filling in the randomized 
numbers makes the cracker hard to solve the firmware file and find out the hardware 
version algorithm. 

20 A full content of a firmware ID code is as follows: 
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In which, Vendor/Product ID relates to the vender name and product name; V is a 
byte of vender code; C is a byte of CPU code because CPU is an important component 
correlative to the firmware version; P is a byte of product code; H is a byte of hardware 
(circuit board) code; R is a reserved byte for extension; CS is a byte of checksum; salt is a 
byte of randomized number; H() is a byte of hardware ID code; Software dynamic version 
is a 6-byte software version code, and Randl and Rand2 are randomized numbers for filling 
the empty spaces. The following is an example of process for forming a firmware ID code. 
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10 2. Computing and filling in the hardware ID code and salt 
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3. Computing and filling in the checksum 
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4. Filling randomized numbers in the empty spaces 
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FIG. 4 a flowchart of detailed process of checking firmware ID code and hardware 
ID code and upgrading the firmware in a method of the invention. The steps are: assuring 
that the system resources are capable of storing the new firmware (step 401); loading the 
5 new firmware (step 402); confirming the checksum of the new firmware (step 403); taking 
ID codes of the new firmware and the original salt stored in the hardware for computing the 
hardware ID code (step 404); checking whether the computed hardware ID code is the same 
as that stored in the product hardware (step 405) and recording the new firmware into the 
flash memory according to the checking result, and restarting automatically (step 406). In 
10 the process, if the system resources are insufficient, or the checking result is not complied, 
a waming message is generated to inform the user to restart. 

In conclusion, a method for controlling upgrade of firmware of an electronic device 
according to the invention has the following advantages: 

a) The loaded firmware file is verified through a checksum that prevents any 
1 5 intentional or unintentional modification to the file; 

b) By checking the computed hardware ID code with the one stored in the product 
hardware, any intentional or unintentional upgrade of incorrect file is prevented; 

c) The capacity of system resources is first checked before upgrading the firmware 
so as to prevent failure during upgrade; 

20 d) The firmware version, compatible product and hardware specifications can be 

identified directly firom the firmware so as to assure the correctness of firmware 
upgrade; 
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e) For crackers who intend to upgrade the firmware illegally, such as recording a 
firmware of vender A into a product of vender B, there are multiple mechanisms 
for protecting the firmware file. First, a checksum is used that any modification 
of the file causes a checksum error. Second, a password is required for 
computing the hardware ID code; the password is not published. Third, 
randomized salts are generated for computing hardware ID codes, the hardware 
ID code and some other randomized numbers are hard to be identified. Filling in 
the randomized numbers makes any cracker hard to solve the firmware file and 
find out the hardware version algorithm; 

f) The algorithms for computing the hardware ID code and the checksum can be 
dynamically changed if needed. For efficiency, XOR computation is used. 
Otherwise, a higher safety computation, such as MD5 (message-digest algorithm) or 
other algorithms can be used. 

The invention being thus described, it will be obvious that the same may be varied in 
many ways. Such variations are not to be regarded as a departure fi"om the spirit and scope 
of the invention, and all such modifications as would be obvious to one skilled in the art are 
intended to be included within the scope of the following claims. 
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